Dependency-Track unofficial
POST/v1/vulnerability/{uuid}/tags

Update vulnerability tags

Updates the tags associated with a vulnerability identified by its UUID. Send an optional JSON array of tag strings; the authenticated user needs VULNERABILITY_MANAGEMENT or VULNERABILITY_MANAGEMENT_UPDATE permission. The response contains the updated vulnerability.

  • IdempotentThe SDK sends Idempotency-Key, so a retried request is only applied once.

1 parameter
uuidstringrequired
The UUID of the vulnerability whose tags you want to update.

3 status codes
200Returns the updated vulnerability object.
affectedActiveProjectCountintegeroptional
affectedComponentsarray<object>optional
affectedInactiveProjectCountintegeroptional
affectedProjectCountintegeroptional
aliasesarray<object>optional
componentsarray<object>optional
createdstringoptional
creditsstringoptional
cvssV2BaseScorenumberoptional
cvssV2ExploitabilitySubScorenumberoptional
cvssV2ImpactSubScorenumberoptional
cvssV2Vectorstringoptional
cvssV3BaseScorenumberoptional
cvssV3ExploitabilitySubScorenumberoptional
cvssV3ImpactSubScorenumberoptional
cvssV3Vectorstringoptional
cvssV4Scorenumberoptional
cvssV4Vectorstringoptional
cwesarray<object>optional
descriptionstringoptional
detailstringoptional
epssobjectoptional
epssPercentilenumberoptional
epssScorenumberoptional
friendlyVulnIdstringrequired
isKevbooleanoptional
owaspRRBusinessImpactScorenumberoptional
owaspRRLikelihoodScorenumberoptional
owaspRRTechnicalImpactScorenumberoptional
owaspRRVectorstringoptional
patchedVersionsstringoptional
publishedstringoptional
recommendationstringoptional
referencesstringoptional
rejectedstringoptional
serviceComponentsarray<object>optional
severitystringoptional
Allowed:CRITICALHIGHMEDIUMLOWINFOUNASSIGNED
sourcestringrequired
subTitlestringoptional
tagsarray<object>optional
titlestringoptional
updatedstringoptional
uuidstringrequired
vulnIdstringrequired
vulnerableVersionsstringoptional
401Returned when the request is unauthorized.
404Returned when the vulnerability could not be found.

Error handling

A 401 is returned when the request is unauthorized. A 404 is returned when the vulnerability identified by the uuid path parameter cannot be found. The authenticated user must have VULNERABILITY_MANAGEMENT or VULNERABILITY_MANAGEMENT_UPDATE permission.